|
211761
|
9.8 |
CRITICAL
Network
|
apple
|
mac_os_x
tvos
watchos
iphone_os
|
An out-of-bounds read was addressed with improved input validation.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-8641
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211762
|
7.8 |
HIGH
Local
|
apple
|
iphone_os
tvos
watchos
|
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to gain root privileges.
|
CWE-20
Improper Input Validation
|
CVE-2019-8637
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211763
|
7.8 |
HIGH
Local
|
apple
|
mac_os_x
|
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.
|
CWE-787
CWE-415
Out-of-bounds Write
Double Free
|
CVE-2019-8635
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211764
|
8.8 |
HIGH
Network
|
apple
|
mac_os_x
|
An authentication issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5. A user may be unexpectedly logged in to another user’s account.
|
CWE-287
Improper Authentication
|
CVE-2019-8634
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211765
|
6.5 |
MEDIUM
Network
|
apple
|
texture
|
Some analytics data was sent using HTTP rather than HTTPS. This was addressed by no longer sending this analytics data. This issue is fixed in Texture 5.11.10 for iOS, Texture 4.22.0.4 for Android. A…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2019-8632
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211766
|
3.3 |
LOW
Local
|
apple
|
iphone_os
|
The issue was addressed with improved UI handling. This issue is fixed in iOS 12.3. The lock screen may show a locked icon after unlocking.
|
NVD-CWE-noinfo
NVD-CWE-Other
|
CVE-2019-8630
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211767
|
7.8 |
HIGH
Local
|
apple
|
mac_os_x
|
A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.
|
CWE-665
Improper Initialization
|
CVE-2019-8629
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211768
|
8.8 |
HIGH
Network
|
apple
|
icloud
itunes
safari
iphone_os
tvos
mac_os_x
|
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for …
|
CWE-787
Out-of-bounds Write
|
CVE-2019-8628
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211769
|
6.5 |
MEDIUM
Network
|
apple
|
iphone_os
watchos
|
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, watchOS 5.2.1. Processing a maliciously crafted message may lead to a denial of service.
|
CWE-20
Improper Input Validation
|
CVE-2019-8626
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211770
|
6.1 |
MEDIUM
Network
|
apple
webkitgtk
|
itunes
icloud
webkitgtk\+
|
A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafte…
|
CWE-79
Cross-site Scripting
|
CVE-2019-8625
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
